This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

1 . (currently amended) An apparatus for routing packets from a first network node to a 
second network node in a data network, comprising: 

means for assigning and then sending an ID to the first node; 

means for mapping the assigned ID that is associated with at least one VPN, wherein the 
ID is assigned , sent, and mapped b y an entity other than the first node; 

means for receiving a packet from the first node, said packet including the ID associated 
with said first node, and including routing information for routing said packet to a destination 
address associated with said second node; 

means for examining the packet to identify the ID of the first node; and 

means for using said first node ID and routing information and the mapping to determine 
whether said first node is associated with at least one VPN. 

2. (original) The apparatus of claim 1 further comprising means for routing the packet to the 
second node. 

3. (currently amended) An apparatus of associating nodes in a data network with at least 
one virtual private network (VPN), the data network including an access network having at least 
one Head End device and a plurality of nodes, the access network further including at least one 
shared access channel utilized by a first and a second node of the plurality of nodes to 
communicate with the Head End device, said apparatus comprising: 

means for assigning and then sending an ID to the first node; 

means for mapping the assigned ID with at least one VPN, wherein the ID is assigned, 
sent, and mapped by an entity other than the first node; 

means for receiving assigning an address te for the first node that is associated with at 
least one VPN , whoroin the address is assigned by an entity other than the first node ; 

means for receiving a communication from the first node in the access network; 

means for identifyin g, within the received communication, the address and ID of the first 
node , wherein the address is specific to the network on which the first node resides ; and 

means for using said identified address , the identified ID, and the mapping to determine 
whether said first node is associated with at least one VPN. 



4. (original) The apparatus of claim 3 further comprising means for mapping said first node to 
a particular sub-interface on the access network. 
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5. (currently amended) An apparatus of associating nodes in a data network with at least 
one virtual private network (VPN), the data network including an access network having at least 
one Head End device and a plurality of nodes, the access network further including at least one 
shared access channel utilized by a first and a second node of the plurality of nodes to 
communicate with the Head End device, said apparatus comprising: 

means for determining whether said first node is a member of at least one VPN; and 

means for if it is determined that said first node is a member of at least one VPN, 
assigning and then sending an ID to the node and binding the an ID of said node with said VPN 
to thereby cause said first node to be associated with said VPN, wherein the ID is assigned, sent, 
and then bound with the node by an entity other than the node. 

6. (original) The apparatus of claim 5 further including means for mapping a particular sub- 
interface of the Head End to said particular VPN. 

7. (currently amended) The apparatus of claim 5 22 further comprising: 

means for receiving at said Head End device a packet from said first node, said packet including 
a destination address corresponding to a second node in the network; 

means for examining said packet to identify the ID of said first node; and 

means for using said ID at said Head End device to determine whether said first node is a 
member of at least one VPN. 

8. (original) The apparatus of claim 7 further comprising: 

means for if it is determined that said first node is a member of a first VPN, determining at said 
Head End device whether the destination address of said packet is within said first VPN. 

9. (original) The apparatus of claim 7 further comprising means for routing the packet to the 
second node. 

10. (currently amended) An apparatus for configuring a Head End of an access network to 

route packets from a first node to a second node in the access network, the apparatus comprising: 
means for associating particular network nodes on the access network with a first at least 
one corresponding virtual private network (VPN) ; 

means for assigning and then sending to the first node an ID specific to the access 
network , wherein the ID is assigned and sent to the first node by an entity other than the first 
node; and 

means for associating the assigned ID with the first VPN to thereby cause the first node 
to be associated with the first VPN , wherein the assigned ID is associated by the entity other than 
the first node. 



1 1 . The apparatus of claim 10 further means for including mapping a particular sub-interface 
of the Head End to the first VPN. 
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